Error: rpki-repo.registro.br/repo/4wo2ZEuHGGgiBBXvSVzUuonCKt7z8DfM3jhRb4595yx4/0/19F47F472FDA2CAF0620C801DDAD6FD2380E17F0.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/4wo2ZEuHGGgiBBXvSVzUuonCKt7z8DfM3jhRb4595yx4/0/19F47F472FDA2CAF0620C801DDAD6FD2380E17F0.mft
File:                     19F47F472FDA2CAF0620C801DDAD6FD2380E17F0.mft (raw, json)
Hash identifier:          WBJcHGbrlpTC3WwW0RF34md+9QqezoLqO9MrOlJ3PJw=
Subject key identifier:   3D:82:36:04:8C:70:23:56:D2:6F:DE:14:0C:EB:99:89:24:04:41:61
Authority key identifier: 19:F4:7F:47:2F:DA:2C:AF:06:20:C8:01:DD:AD:6F:D2:38:0E:17:F0
Certificate issuer:       /CN=19F47F472FDA2CAF0620C801DDAD6FD2380E17F0
Certificate serial:       3915F51638942FD84ABA10FD14730BE5F2E84BCC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19F47F472FDA2CAF0620C801DDAD6FD2380E17F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4wo2ZEuHGGgiBBXvSVzUuonCKt7z8DfM3jhRb4595yx4/0/19F47F472FDA2CAF0620C801DDAD6FD2380E17F0.mft
Manifest number:          CB
Signing time:             Sat 22 Aug 2026 17:01:32 +0000
Manifest this update:     Sat 22 Aug 2026 16:56:32 +0000
Manifest next update:     Sun 23 Aug 2026 17:17:32 +0000
Files and hashes:         1: 3138372e38362e3137322e302f32332d3233203d3e20323730393839.roa (hash: 8vcfXxaEdUzk9Ga1eHsYRqnCDcDlGF+NO2oWhrTz/us=)
                          2: 3138372e38362e3137322e302f32342d3234203d3e20323730393839.roa (hash: wr18UCEWs+JPy5UBDctLK9mGbQcBptIlaVptfJ8sC08=)
                          3: 323830343a373439303a3a2f33332d3333203d3e20323730393839.roa (hash: ZoHG1F+UntcOHkChJ9rth0XroR5meLw5AaFzrOsz+P4=)
                          4: 3138372e38362e3137352e302f32342d3234203d3e20323730393839.roa (hash: TZYz93Roa/obvaXIvqsKCZvVA6vHqCNEJS6WUycCAFE=)
                          5: 3138372e38362e3137322e302f32322d3232203d3e20323730393839.roa (hash: ut/cH9rE7NKj+3rCCPDto6DuM19DFTcQ+G/Bs5mTj4Q=)
                          6: 323830343a373439303a3a2f33322d3332203d3e20323730393839.roa (hash: KM0to5txXk1triNFN/i68QvrxYtPgF1s3Xe5NP5Ay5o=)
                          7: 3138372e38362e3137342e302f32332d3233203d3e20323730393839.roa (hash: aNdI5gHMjGVEy8AbIzAzD+b/XEgmY56xzFP9a5oPey0=)
                          8: 3138372e38362e3137332e302f32342d3234203d3e20323730393839.roa (hash: 72xemwp/evHnRtOKGbkqZGbsWjUd74+dQPB3nPzKE7E=)
                          9: 19F47F472FDA2CAF0620C801DDAD6FD2380E17F0.crl (hash: 4HdhHm4qL448yAv4i1OL7+Egwpc2I3PhdhjMPl+rfcA=)
                          10: 3138372e38362e3137342e302f32342d3234203d3e20323730393839.roa (hash: zFLNR0Vb0dZw5SA5o3ACkFf7x7jndTfTZz9uiQENfxE=)
                          11: 323830343a373439303a383030303a3a2f33332d3333203d3e20323730393839.roa (hash: UMR/6G1TIERSwfaAFfNOO1gwblg4x8GnI0M+N6+PihE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4wo2ZEuHGGgiBBXvSVzUuonCKt7z8DfM3jhRb4595yx4/0/19F47F472FDA2CAF0620C801DDAD6FD2380E17F0.crl
                          rsync://rpki-repo.registro.br/repo/4wo2ZEuHGGgiBBXvSVzUuonCKt7z8DfM3jhRb4595yx4/0/19F47F472FDA2CAF0620C801DDAD6FD2380E17F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19F47F472FDA2CAF0620C801DDAD6FD2380E17F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 17:17:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:15:f5:16:38:94:2f:d8:4a:ba:10:fd:14:73:0b:e5:f2:e8:4b:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19F47F472FDA2CAF0620C801DDAD6FD2380E17F0
        Validity
            Not Before: Aug 22 16:56:32 2026 GMT
            Not After : Aug 23 17:17:32 2026 GMT
        Subject: CN=3D8236048C702356D26FDE140CEB998924044161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1b:fa:13:ca:c4:95:06:92:ad:f5:c8:ae:38:
                    89:e2:e6:12:e5:90:cc:81:b8:40:e6:f4:b5:46:8e:
                    52:8f:fc:5a:aa:12:89:8e:0d:60:1c:ff:df:7f:0c:
                    4e:b8:a7:72:ee:63:fb:d8:ca:5d:4b:25:9e:42:88:
                    fa:a8:6f:9a:8e:97:99:9d:0c:0f:b9:29:7d:91:5a:
                    e5:e7:3c:3d:45:bc:1b:d8:d1:03:6e:25:59:3f:4a:
                    e4:61:f8:69:32:18:8c:73:0a:95:43:07:7a:96:c3:
                    20:f4:11:8d:2a:63:e2:85:94:e1:c2:4e:58:b5:6f:
                    e7:bb:43:33:0a:6e:53:22:42:9c:b9:4a:dc:85:29:
                    9d:07:5e:01:85:75:25:a7:d6:f2:d0:98:a6:fb:31:
                    c6:65:05:f9:35:e7:cd:ec:ea:b1:8f:6e:c1:87:59:
                    2c:e1:f6:7d:0f:29:4e:1e:34:6d:11:6b:ef:17:71:
                    33:26:41:ac:c4:e1:f4:66:6a:51:bb:f6:7b:c2:96:
                    1f:91:2a:17:b5:12:92:6f:b3:0b:d3:ff:f5:bd:6e:
                    32:32:6e:81:52:c5:71:f2:d2:c2:b5:35:60:8b:24:
                    b9:8b:ff:30:16:9a:8b:22:e3:14:ef:99:e6:cb:8e:
                    0f:08:be:11:27:18:8f:5a:3e:fc:6a:bc:90:f7:7d:
                    c7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:82:36:04:8C:70:23:56:D2:6F:DE:14:0C:EB:99:89:24:04:41:61
            X509v3 Authority Key Identifier:
                keyid:19:F4:7F:47:2F:DA:2C:AF:06:20:C8:01:DD:AD:6F:D2:38:0E:17:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4wo2ZEuHGGgiBBXvSVzUuonCKt7z8DfM3jhRb4595yx4/0/19F47F472FDA2CAF0620C801DDAD6FD2380E17F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19F47F472FDA2CAF0620C801DDAD6FD2380E17F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4wo2ZEuHGGgiBBXvSVzUuonCKt7z8DfM3jhRb4595yx4/0/19F47F472FDA2CAF0620C801DDAD6FD2380E17F0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:ab:63:97:38:38:7b:71:0c:0f:fa:c8:e6:1d:b7:b7:97:af:
         21:d4:36:fa:de:77:04:ef:1d:55:3d:ce:c8:3e:e8:7f:01:d3:
         2b:bd:ea:1a:7b:bd:cc:69:ed:96:8b:19:6e:4f:49:cb:61:63:
         87:14:c5:df:7a:db:2f:96:46:ae:9f:cb:92:f2:ed:12:ad:0b:
         ad:01:62:44:78:0a:e2:75:ff:bb:6e:f7:32:ae:77:8e:0f:b3:
         ac:6a:44:c4:de:18:f6:1b:68:79:54:1d:70:84:32:dc:88:47:
         59:81:a1:b4:39:9a:38:ec:0d:71:20:91:ac:57:a0:f9:0e:93:
         67:3b:83:18:c5:de:b5:22:f0:e1:7f:b3:29:d9:e3:a0:f4:f7:
         a3:69:34:3b:fe:57:02:80:49:be:bb:50:37:af:21:4c:b9:60:
         28:13:78:e6:1a:91:4b:13:68:c2:3f:ce:93:b1:65:d1:d6:56:
         f9:69:50:96:f2:e5:ef:fa:7e:63:bf:60:37:79:e8:24:c2:b4:
         1c:67:57:c9:8e:e8:46:a0:af:51:41:15:66:51:a7:46:f4:61:
         7c:d5:ca:7a:82:6d:ab:86:13:28:69:04:4c:dc:c6:49:04:a7:
         09:0e:ac:d3:18:22:e3:68:3f:27:da:f3:b5:18:8b:36:97:6c:
         cf:74:6d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 04:15:13 2026 by rpki-client